VDB

GCVE-110-MAGEIA-2023-97

GCVE-110-MAGEIA-2023-97
Advisory Published
Vulnetix · Advisory published March 18, 2023
ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. (CVE-2022-46648, CVE-2022-47318)

Affected Products

VendorProductVersionsPlatforms
Mageiaruby-git0 (affected), 1.6.0-1.2.mga8 (unaffected), 0 (affected), 1.6.0-1.2.mga8 (unaffected)—
Mageiabackintime0 (affected), 1.4.1-1.mga9 (unaffected)—

Browse GCVE Records

6,043 records in the GCVE database · Updated October 20, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›